Ah yes, #1 is probably PHP's worst remaining sin. Luckily I don't encounter it a lot, but it did bite me not too long ago.
I loosely put magic quotes in the "help you by adding security holes" category. I'm glad they're finally gone, but I agree that their existence says nothing good about the language designer, or at least the language's aspirations beyond "Personal Home Pages".